Question

A cloud team manages dozens of public-facing services, each fronted by a TLS certificate that must be renewed annually. Last quarter, an expired certificate caused a customer-facing outage because no one noticed the renewal deadline. The team wants a durable solution that prevents recurrence while minimizing manual effort. Which approach BEST addresses the root cause?

Accepted Answer

Adopt a managed certificate service that automatically provisions and renews certificates before expiration, integrated with the load balancers

Answer

Extend all certificate validity periods to the maximum allowed and set a shared calendar reminder for renewals

Answer

Configure a monitoring alert that emails the team when a certificate has already expired

Answer

Store all certificates in a centralized secrets vault and document a manual renewal runbook